Chrome is a best case scenario - it is an extremely well run project
which probably pays more attention to updating its bundled libraries
and pushing out the updates than 99.9% of all projects that bundle
Wheeler would probably agree: the way Chrome does it is ok, but just
because Chrome does it, doesn't mean the average project can do it safely.